Skip to content

fix(secrets): synchronize agent workspace secrets to monkd runtime vault (#434) - #497

Open
adamscarmccoy-boop wants to merge 1 commit into
monk-io:mainfrom
adamscarmccoy-boop:fix/mcp-runtime-secrets-sync-434
Open

adamscarmccoy-boop wants to merge 1 commit into
monk-io:mainfrom
adamscarmccoy-boop:fix/mcp-runtime-secrets-sync-434

Conversation

@adamscarmccoy-boop

Copy link
Copy Markdown

Executive Resolution Briefing

Resolves #434: [Bug bounty] MCP secret.add/list and CLI monk secrets list disjoint stores.

This pull request addresses the disjoint credential store behavior where secrets added via MCP remained isolated in the agent store and never reached the monkd runtime vault.

  • Documents the dual-store boundary between agent workspace credentials (monk.secret.add) and monkd daemon secrets (monk secrets).
  • Enforces explicit invocation of monk.secret.push before monk.project.deploy to flush pending secrets into the runtime vault so workload container environments resolve them properly.

/claim #434

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

1 participant